Always set Active X to prompt.
It should be like that by default.
The Active X prompt to run active x programs which are executables like any other, then download to your machine and run. (you mostly dont notice, cause IE is executing it).
But that is a perfect way to get a virus. Without knowing.
Thanks for the post, it's a good security reminder to everyone.
------------------
Daily Naked
Free Auto Updating Top Referrer Lists